Victim-assisted mitigation technique for TCP-based reflector DDoS attacks

Lecture Notes in Computer Science

Volumn 3462, Issue , 2005, Pages 191-204

  Al Duwairi, Basheer ^a   Manimaran, G ^a  

^a Iowa State University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK PROTOCOLS; PROBLEM SOLVING; TELECOMMUNICATION SERVICES; INTERNET SERVICE PROVIDERS; REFLECTION; TELECOMMUNICATION NETWORKS; TRANSMISSION CONTROL PROTOCOL; WIRELESS TELECOMMUNICATION SYSTEMS;

DENIAL OF SERVICE (DOS); SYN NUMBER BASED FILTERING (SNF); VICTIM-ASSISTED MITIGATION TECHNIQUE; ANALYTICAL STUDIES; DENIAL OF SERVICE; FALSE POSITIVE AND FALSE NEGATIVES; PERFORMANCE METRICS; RESEARCH PROBLEMS; SEQUENCE NUMBER; SYN NUMBER BASED FILTERING;

SECURITY OF DATA; DENIAL-OF-SERVICE ATTACK;

EID: 24944515425     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11422778_16     Document Type: Conference Paper

References (16)

1. J. Aikat, J. Kaur, F. D. Smith, and K. Jeffay, "Variability in TCP Roundtrip Times," in Proc. of the ACM SIGCOMM Internet Measurement Conference (IMC'03), Miami, FL, October 2003.
2. S. Chen and Q. Song, "Perimeter-Based Defense against High Bandwidth DDoS Attacks," to appear in Proc. IEEE Transactions on Parallel and Distributed Systems (TPDS 2005).
3. CERT Advisory CA-1998-01 Smurf IP Denial-of-Service Attacks. Available at: http://www.cert.org/advisories/CA-1998-01.html.
4. B. Cheswick, H. Burch, and S. Branigan, "Mapping and Visualizing the Internet", in Proc. USENIX Annual Technical Conference 2000.
5. Cisco systems, "Defeating DDoS Attacks," white paper.
6. Cisco systems, "Configuring TCP Intercept (Prevent Denial-of-Service Attacks)," available at: http://www.cisco.com/univercd/cc/td/doc/product/ software/ios113ed/113ed_cr/secur_c/scprt3/scdenial.htm
7. P. Ferguson and D. Senie, "Network ingress filtering: Defeating denial-of-service attacks which employ IP source address spoofing," RFC 2827, 2000.
8. nd, 2002. Available at http://grc.com/dos/drdos.htm.
9. C. Jin, H. Wang, and Kang G. Shin," Hop-Count Filtering: An Effective Defense Against Spoofed DDoS Traffic," in Proc. ACM Conference on Computer and Communications Security (CCS)'2003, Washington, DC, October 2003.
10. A. Hussain, J. Heidemann, and C. Papadopoulos,"A Framework for Classifying Denial of Service Attacks," in Proceedings of ACM SIGCOMM 2003.
11. J. Li, J. Mirkovic, M. Wang, P. Reiher, and L. Zhang., "SAVE: Source address validity enforcement protocol," In Proc. of IEEE INFOCOMM 2002, April, 2002.
12. M. Mellia, I. Stoica, and H. Zhang, "TCP Model for Short Lived Flows," in Proc. IEEE Communication Letters, Feb. 2002.
13. V. Paxson, "An analysis of using reflectors for distributed denial-of-service attacks," in Proc. Computer Communication Review 31(3), July 2001
14. T. Peng, C. Leckie and K. Ramamohanarao, "Protection from Distributed Denial of Service Attack Using History-based IP Filtering," in Proc. of IEEE International Conference on Communications (ICC2003), May 2003.
15. T. Peng, C. Leckie and R. Kotagiri,"Detecting reflector attacks by sharing beliefs," in Proc. IEEE Global Communications Conference, October, 2003
16. J. Postel, "Internet Protocol - DARPA Internet Program Protocol Specification," RFC 791.